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Abstract. Tiie idea of the Semantic Web is to annotate Web content 
and services with computer interpretable descriptions with the aim to au- 
tomatize many tasks currently performed by human users. In the context 
of Web services, one of the most interesting tasks is their composition. In 
this paper we formalize this problem in the framework of a constructive 
description logic. In particular we propose a declarative service specifica- 
tion language and a calculus for service composition. We show by means 
of an example how this calculus can be used to define composed Web 
t/3 , services and we discuss the problem of automatic service synthesis. 

1 Introduction 

> 

■r^lj- ' The idea of the Semantic Web is to annotate Web content and services with 

^^D . computer interpretable descriptions in order to automatize many tasks currently 

^\J ' performed by human users. In the context of the Web services, this has led to the 

definition of semantic Web services, that is a semantic description of the capa- 
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t^^ ' bilities and the structure of services in the languages of the semantic Web. The 
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current proposals for the representation of semantic Web services, as OWL-S [10] , 
view services as processes with pre- and post- conditions and effects. The repre- 
sentation by pre- and post- conditions describe the requirements and output of 
a service that is useful to retrieve the service; the representation of the process 
^^ . associated with a service describe the interaction with other given services. One 

^ ' of the main problems in the context of Web services is their composition. The 

problem can be stated as follows: given a composition goal, represented as a ser- 
vice with pre- and post- conditions, compose the available services so to satisfy 
the goal. Obviously in this context the challenge is to provide tools to support 
the definition of the composite service or, at best, to automatize the entire com- 
position process. Using the well known relation between semantic Web languages 
and description logics, here we discuss the problem of service composition in the 
context of constructive description logics. This allows us to draw from the long 
tradition of use of constructive mathematics in the context of program synthesis. 
Indeed, the composition calculus we discuss in this paper is inspired by [13]. 



Part of this work will appear as a position paper in Proceedings of the 4th Interna- 
tional Conference on Web Reasoning and Rule Systems (RR 2010). 



In this paper we formalize the composition problem in the framework of the 
constructive description logic BCDCq. This paper represents an initial presenta- 
tion for our approach: its main contribution is to lay down the definitions for 
a composition language in a way that it can then be possible to define an au- 
tomatic procedure for composition by software synthesis principles. Moreover, 
our approach also exhibits an interesting application of constructive semantics 
for description logics and demonstrates how to take advantage of their compu- 
tational properties. 

The logic BCDCa that forms the base of our proposal is a subsystem of 
BCDC [9] , a logic based on an information terms semantics. The main advantage 
of this semantics is to provide a natural notion of state which is at the base 
of our formalization of Web services and Web service composition. Moreover, 
how discussed in [9] this logic supports the proofs-as-programs paradigm. This 
allows to characterize in this setting also the problem of automatic Web services 
composition. For our purposes, in this paper we present a natural deduction 
calculus for BCDCo: however, this logic can be related to ICACC [4], a construc- 
tive description logic based on a Kripke-style semantics for which we provided a 
decidable tableaux calculus. 

In the following sections we introduce our formalism for the specification of 
services and we present our calculus SC for the definition of composite services. 
In order to do this, we begin by introducing the syntax and information terms 
semantics of BCDCq. 

2 BCDCqi Syntax and Semantics 

BCDCo is a subsystem of BCDC [9] which is the correspondent in the information 
terms semantics context of the basic description logic ACC [1]. The language C 
for BCDCq is based on the following denumerable sets: the set NR of role names, 
the set NC of concept names, the set NI of individual names and the set Var of 
individual variables. The concepts C, D and the formulas K oi C are defined 
according to the following grammar: 

C, D -.-.^ A \ ^C \ C n D \ C U D \ 3R.C \ \/R.C 
K ::= ^\ {s,t) ■.R\t:C\ AnC 

where s,t £ NI U Var, R £ NR, A £ NC. A closed formula is a formula not 
containing individual variables. A .simple formula is either a formula of the kind 
_L, (s, i) : i? or a formula of the kind t : C with C a concept name or a negated 
concept. We remark that we do not allow general inclusions of concepts, but we 
only admit atomic concepts in the antecedent of a subsumption. 

In the following we will be interested in the formulas generated by a finite 
subset M of NI; we denote with Cj^ such a language. A model M for Cj^ is a 
pair {p^ , .■^), where V^ is a non-empty set (the domain of M) and .^ is a 
valuation map such that: (i) for every c £ A/", c^ £ 2?-^; (ii) for every A £ NC, 
AM (zv^; (in) for every R £ NR, R^ CV-^ 



A non atomic concept C is interpreted by a subset C-^ of 2?-^ as usual: 

(C n D)^ ^ c-^nD-^ 

(C U D)^ = C-^UD-^ 

(3R.C)^ = {ceV^\ there is d e 2?-^ s.t. (c, d) e i?-^ and d e C-^} 

(yR.C)-^ = { c e 2?-^ I for all d G 23-^, (c, d) e i?-^ implies d e C-^} 

A closed formula K is ua/id in Ai, and we write Ai \^ K, ii K ^ ± and: 

M^t-.CiSt-^eC-^ 
M ^ A\^C iS A-^ CC-^ 

A theory T consists of a Ti?oa; and an A Box. A TBox is a finite set of formulas 
of the form A\ZC. An ABox is a finite set of concept and role assertions: a 
concept assertion is a formula of the kind c : A, with c £ NI and A G NC; a role 
assertion is a formula of the kind (c, d) : i?, with c, d G NI and i? G NR. 

The constructive interpretation of BCDCq is based on the notion of infor- 
mation term [9]. Intuitively, an information term a for a closed formula iiT is a 
structured object that provides a justification for the validity of if in a classical 
model, in the spirit of the BHK interpretation of logical connectives [18]. Infor- 
mation terms are inductively defined on the structure of the closed formulas, 
starting from the constant symbol tt associated to atomic formulas. The mean- 
ing and the correct reading of an information term is provided by the related 
formula. For instance, the truthness of an existential formula c : 3R.C in a clas- 
sical model A4 can be explained by its information term {d, a) , that explicitly 
provides the witness d such that (c^,d-^) G R^ and d^ G C-^; moreover, the 
information term a recursively explains why d-'^ G C^ . 

Formally, given TV C NI and a closed formula K of Cj\f, we define the set of 
information terms IT^{K) by induction on K as follows. 

IT^{K) = {tt}, if iiT is a simple formula 

iT7v(c : Ci n C2) ^ { (a, /3) I a G ita/-(c : Ci) and /S G lT^f{c : C2) } 

n^/{c : Ci U C2) == { (fc, a) I fc G {1, 2} and a G itaa(c : Ck) } 

iT^f{c : 3R.C) = { {d, a) \ d e Af and a G iTj^{d : C) } 

itaa(c : Vi?.C) === { : AA ^ UdeA^ ^^^^i^ ■ C) \ cf,{d) G iT^f{d : C) } 

lT^f{A^C) = {cf,:Af^ Ude^ ^^^^rid ■ C) \ 0(d) G iT^{d : C) } 

We remark that information terms for iiT = c : VR.C and K = A^C formulas 
are defined as a set of functions mapping every element d of the finite set M to 
an information term for d : C. In other words, any information term for these 
formulas justifies that every element of A/" belongs to the concept defined by C 
in a given classical model. 



Let Al be a model for Lf^^ K a closed formula of Cj^f and 77 e IT^{K). We 
define the realizability relation A4 \> (rj) K by induction on the structure of K. 

- M\> {tt)K iSM\= K. 

- M> ({a, P)) c : Ci n C2 iff 7W > (a) c : Ci and 7W [> (^) c : C2. 

- M> ((fc, a)) c : Ci U C2 iff 7W > (a) c : Cfc. 

- 7W [> ((d, a)) c : 3i?.C iff 7W h (c, d) : R and M t> (a) d : C. 

- M\> {(t>)c: VR.C iS M ^ c: WR.C and, for every d e J\f, M ^ {c,d) : R 
implies M O {(j){d)) d : C 

- M > {(j)) A\ZC iS, M h -4 C C and, for every deAf,iiM> (tt) d : A then 
M > {(pid)) d : C 

If F is a finite set of closed formulas {Ki, . . . , Kn} of C^ (for any ordering of 
the formulas of F), iTj\f{r) denotes the set of n-tuples fj = (771, .. . ,?7„) such 
that, for every 1 < j < n, rjj G it f^{Kj)\ M t> {rj) F iff, for every 1 < j < n, 
M>{rij)Kj. 

Now, we introduce the example we refer to throughout this paper. 

Example 1 (Theory definition). Our example represents a reinterpretation and 
a formalization in our context of the "purchase and delivery service" example 
of [17]. The example presents a system composed by three agents: a User, a 
Shipper and a Producer agent. The Shipper and the Producer provide the User 
with services to request and obtain offers for the delivery and the purchase of 
a product: the goal of the example is to combine the services of the two agents 
in order to provide the User with a single service to request the production and 
shipping of a product. We begin by defining the theory T ps that models our 
system. 

AcceptedRequest C Request 

Ref usedRequest C Request Fl ^AcceptedRequest 

ProduceRequest C Request 

AcceptedProduceRequest C ProduceRequest D AcceptedRequest 

ShippingRequest C Request 

AcceptedShippingRequest C ShippingRequest n AcceptedRequest 

ProduceOff er C Offer 
ShippingOf f er [I Offer 

The theory states that a request can be classified as accepted or refused by one of 
the two agents: we further characterize offers, requests and accepted requests by 
the agent to which they refer. To relate requests to offers and to the information 
that they convey, we include in T ps the following axioms: 

Offer C VhasCost .Price 
Request C VhasOff er.Off er 

ShippingRequest C VhasDestination. Location 
ProduceRequest C VhasProduct .Product 

In other words, every offer in Offer specifies its Price by the role hasCost; 
requests relate to their offers by the role hasOf f er; finally, a ShippingRequest 



contains information about the Location to where to ship by the role hasDestination 
and a ProduceRequest describes the Product to buy by the role hasProduct. 

Given a finite set of individual names TV, we assume to have a suitable 77 G 
nj\f{Tps) justifying the validity of Tps with respect to elements of A/". Note 
that Tps only represents a TBox, thus information terms of its subsumptions 
are functions mapping information terms of the included concept in those of the 
including concept. If we assume to store assertions of an ABox over TV in some 
kind of database (e.g., a relational database or the data part of a logic program), 
the functions for each of these information terms can be implemented as query 
prototypes (to be instantiated with individuals of tV) over the database. O 

Given a finite subset TV of NI, an M -substitution cr is a map a : Var — > TV. We 
extend a to C^ as usual: if c G TV, ac — c; for a formula K of Cj\f, aK denotes 
the closed formula of C^ obtained by replacing every variable x occurring in K 
with <t{x); given a set of formulas F, aF is the set of aK such that K € F. li 
c G TV, (7[c/p\ is the TV-substitution a' such that a' {p) ~ c and (t'(x) ~ cr(a;) for 
X ^ p. Pl TV-substitution cr is a closing substitution for a set of formulas F if uF 
is a set of closed formulas. 

Now, let us consider the natural deduction calculus MD for BCDCq whose 
rules are given in Figure 1. We denote with ir :: F \- K the fact that tt is a proof 
oi F \- K and with F {—rrz — K the fact that there exists a proof it :: F '^ K m. 
MT> . For a detailed presentation of the calculus and its properties we refer the 
reader to [9] . Here we only note that TVD is sound with respect to the information 
term semantics, namely: 

Theorem 1 (Soundness). Let F U \K} C Cj^ , let n :: F \- K be a proof of 
MD and let S be the set of all the closing M -substitutions for F U {-ft'}. Then 
there exists an operator 



^M ■■ U ita/-(^/^) ^ U it^i{(tK) 



such that, for every 7 G It{<tF) and for every model Ai for L^ , Ai > (7) crF 
implies M O (^^5/(7)) crK. D 

We remark that the proof of the above theorem is constructive. As shown in [9] 
we can effectively extract from the proof n the operator <PJf. This plays an 
important role in the definition of our service composition calculus in Section 4. 



3 Service Specifications 

In this section we introduce the basic definitions for the description of systems 
and for the specification of services operating on them. A service specification 
(over Cjij-) is an expression of the form s(a;) :: P ^ Q where: s is a label that 
identifies the service; x is the input parameter of the service (to be instantiated 
with an individual name from TV); P and Q are concepts over Cj\f. P is called 
the service pre-condition, denoted with Pre(s), and Q the service post- condition, 



A ht:C Tahf :-C rh± F h t : A r,t : C h ± 

±1 ±E CE ,1 

ri,r2h± rhK r,Aizcht:C rht-.^c 

A h i : Ci A ^ i : C2 r h i : Ci n C2 



■ HE^ke {1,2} 



A,Aht:CinC2 rhi:Cfe 

r h t : Cfc A K i : Ci U C2 A, t : Ci h A- A ^ t : C2 h A- 

■ u/fe fc e {1, 2} uB 



rht:CiuC2 a,a,aka: 

r h u : C A I- i : 3i?.C r2, it,p) : R,p : C h K where p docs not 

3E occur in 7^2 U {K} 



r,{t,u) : Rht: 3R.C A, A I" A" and p # t 

r,{t,p):Rhp:C ^1^^^ J, d„^, „„t „^^^^ ^ ^ ^ • ^-^-^ 



Fig. 1. The rules of the calculus J^V 



denoted with Post(s). Given a service specification s(x) :: P ^ Q over jCf/ we 
call service implementation a function 

<?. : U lTAA(t : ^) -> U lTAA(i : Q) 

teAf teM 

We denote with the pair (s(x) :: A => Q,<Ps) (or simply with (s,^s)) a service 
definition over £7^^. 

Essentially, a service definition corresponds to an effective Web service. The 
service specification provides the formal description of the behavior of the ser- 
vice in terms of pre- and post- conditions. The function ^^ represents a formal 
description of service implementation (i.e., of the input/output function). 

The notion of correctness is modeled as follows. Given a language Cj\f, a 
service definition (s(x) :: P ^ Q,^s) over £j\f and a model M for £^f, <Ps 
uniformly solves s{x) :: P ^ Q in Ai iff, for every individual name t £ J\f and 
every a £ iTj^it : P) such that M\> {a)t : P, M\> (^s(a)) t : Q. 

Example 2 (Service specification). We can now model the services provided by 
the Producer and Shipper agents. 

DoProduceRequest(req) :: 

ProduceRequest D BhasProduct . Product 
=> Ref usedRequest U ( AcceptedProduceRequest n 
3has0f f er . (ProduceOff er n BhasCost .Price ) ) 

DoShippingRequest(req) :: 

ShippingRequest PI 3hasDestination. Location 



=> Ref usedRequest U ( AcceptedShippingRequest Fl 
3hasQffer. (ShippingOffer Fl BhasCost .Price ) ) 

The service described by DoProduceRequest takes as input a request req spec- 
ifying the required product and must classify it according to the service post- 
condition: namely, the service can answer with a refusal to the request (by classi- 
fying req in Ref usedRequest) or it can accept the request and produce an offer 
with a price specified by the hasCost role. The DoShippingRequest service works 
in a similar way: it takes as input the destination where to ship the product and 
either refuses the request or it accepts the request providing an offer with the 
associated price. 

In our setting, service implementations correspond to functions mapping 
information terms for the pre-condition into information terms for the post- 
condition. These functions formalize the behavior of the effective implementa- 
tion of the web services. In particular let us consider the implementation ^dpr 
of the DoProduceRequest service. Let req_l be the individual name represent- 
ing a request. The input of <?dpr is any information term for a G iT7v'(i'eq_l : 
Pre(DoProduceRequest)). req_l can be seen as a reference to a database record 
providing the information required by the service precondition and a can be 
seen as a structured representation of such information. Let us suppose that 
a = (tt, (book_l, tt)); this information term means that req_l is a product 
request with associated product book_l. Now, let /3 ~ ^dpr(q;) G iT(req_l : 
Post(DoProduceRequest)). li /3 ~ (l,tt), this classify req_l as refused. Other- 
wise /3 could be (2, (tt, (off_l, (tt, (price_l,tt))))) which classifies req_l as 
accepted and specifies that there is an offer of f _1 with associated price price_l 
for the requested product. The implementation <?dsr of DoShippingRequest acts 
in a similar way. 

To conclude, we remark that the intended model Ai we use to evaluate the 
correctness of the system is implicitly defined by the knowledge base of the 
system. Indeed, Ai [> (a) req_l : Pre(DoProduceRequest) if and only if in our 
system req_l effectively codify a request and book_l is classified as a product. 
In this case, since ^dpr uniformly solves the service specification, we know that 
A^ > (/3) req_l : Post(DoProduceRequest): this trivially corresponds to the fact 
that, looking at its knowledge base, the Producer can generate its offer. O 

The problem of service composition amounts to build a new service from a 
family of implemented services. We formalize this problem in the context of an 
environment, that is a structure E = {Cj\f, T,?7, (si,<?i), . . . , (s„,<?„)) where: 

— T is a theory over the language Cj^; 

— 77 e ita/-(T); 

— for every i e {I, . . . , n}, (s^, ^i) is a service definition in Cj\f. 

Given a model A4 for Cj\f we say that A^ is a model for E iff A( [> (ry) T and for 
every i G {1, . . . , n}, <?j uniformly solves Si in A^. 

A service specification s' is solvable in E if there exists an implementation 
$' of s' such that, for every model A4 of Cj\f, if A^ is a model for E then ^' 
uniformly solves s' in A^. 
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Example 3 (Composition problem, definition). Given the previous specifications, 
we are now ready to state the composition problem. We want to combine the 
services DoProduceRequest and DoShippingRequest to provide the User with a 
single service to request both the production and the delivery of an object. To 
do this, we define a third service that composes the offers from the two agents: 

ProcessOffers(req) :: 

AcceptedProduceRequest Fl BhasOf f er . ( ProduceOf f er PI 3hasCost .Price ) H 
AcceptedShippingRequest H 3hasDf f er . ( ShippingDf f er Fl BhasCost .Price ) 
=> AcceptedRequest H 3hasDf f er . ( Of f er Fl BhasCost .Price ) 

Let ^po be the implementation of ProcessOfFers. We define the environment 
Eps = {Cj^,Tps,ri, Si, 82,83) where ^i = (DoProduceRequest, <?dpr), 82 = 
(DoShippingRequest, ^dsr) and 5*3 = (ProcessOfFers, <?po). The problem can be 
now reduced to the definition of a suitable service specification that is solvable 
in such environment. O 

Now, the main point of service composition is to effectively build the implemen- 
tation of the service specification starting from the environment. This problem 
can be solved in two ways: the first solution consists in the definition of a com- 
position language which allows the user to build up a new service starting from 
the environment. The second is given by providing a method to automatically 
build up the new service implementation. 

The formalization of the composition problem in the framework of a (con- 
structive) logic allows to use the proof-theoretical properties of the logical sys- 
tem to support the composition problem. In this paper we concentrate on the 
definition of a composition language. As for the problem of automatic service 
composition, it can be seen as a reformulation of the program- synthesis prob- 
lem, a problem which has a long tradition in the constructive logics context and 
which has already been studied in the framework of BCDC, see [3, 9]. 



4 Composition Calculus SC 

The composition calculus we describe in this section is inspired by PAP [13], a 
calculus which support program synthesis from proofs of a constructive logical 
system. Our calculus allows to manually compose services guaranteeing the cor- 
rectness of the composed service. The main advantage of our formalization is that 
service composition can be supported by an appropriate proof-system. This tool 
can be used to check the correctness of rule applications and to automatically 
build the proofs of the applicability conditions. 

A composition over an environment E = {Cj\f, T, rj, {si,<Pi), . . . , (s„, <?„)) is 
defined as: 

s(a;) :: P^Q 

r 

i7i :si(a:) :: Pi ^ Qi 

n„ : Sn(a;) :: P„ =^ Q„ 



s(a-) 


■.■.A=^B 


si(a;) 
Sn(a;) 


: ^n ^ Bn 




s(a-) 


:: A^B 


si(a;) 
Sn(a;) 


:: Ai ^ Bi 
: An ^ B„ 




six) 


:: A^B 


si(a;) 
Sn (x) 


:: Ai ^ Bi 
: An ^ B„ 



s(a;) :: A ^ B AX 



AC 



(ofe) T,a;: A 



a: : Ak, for fe £ {1, . . . ,n} 



(&) T,a; : Bi n ... nB„ 



X : B 



<Psia) = M'^s, ($a, (a)), ...,#,„ (<?„„ (q))) 



AC 



(a) T,a; : A 



BCDCn 



X : AlU ...UAr, 



{bk)T,x:Bk \-^^^^x:B,ioTke{l,...,n} 
*s(a) = <l*6j^sfc(afe)) where (fc,afe) = $a(a) 

(&i) T,a: : A 



AC < 



(fefc) T,a::Bfe_i 



(c) T,a;:B„ 



I^BE^ X -Ak, for fc e {2, ...,n} 
-^ x : B 



AC (a)T,x:A 



Bcr>£n 



... -"^si ■<^6i(a) 
a; : B 



s(a;) :: A => B ENV with (s, $s) a service defined in E 



Fig. 2. The rules of calculus SC 



where: 

— s(x) :: P => Q is a service specification over E; 

— r is one of the rules of the composition calculus SC; 

— For every i G {1, . . . , n}, il, : Si(a;) :: P; ^ Qi is a service composition over E 
that meets the applicability conditions of r. 

The rules of the composition calculus SC and their computational interpretation 
#s are given in Figure 2. In the rules, the service specification s(x) :: P ^ Q 
is called the main sequent of the rule and represents the specification of the 
service to be composed. The service specifications Si(a;) :: Pi ^ Qi are called 
subsequents of the rule and represent the services involved in the composition. 
The sequents must satisfy the applicability conditions (AC) of the rule. These 
conditions describe the role of the subsequents in the composition of the main 
sequent: in order to verify the correctness of compositions, the proof checker 
must verify the truth of such conditions. 

The composition rules have both a logical and a computational reading. Given a 
service composition 77 with main sequent s(x) :: P ^ Q, we define the function 



^s • UtGA^^'^-'^(* • ^) ^ UteA^iTA^(^ • Q) associated with s. The function is 
inductively defined on the last rule r applied in 77. Here we assume the following 
conventions: given a subsequent s' of the rule r, we denote with ^s' its computed 
function; given the applicability condition (a) 7^ | ^ — a; : ^ of the rule r we 
denote with <^a the operator corresponding to the proof i: :: F \- x : A defined 
according to Section 2. 

Inspecting the rules of Figure 2 we see that: 

— The AND rule represents a H introduction on the right hand side of the 
specification sequents: the services composed by this rule are seen as a parallel 
execution of the sub services. 

— The CASE rule represents a U elimination on the left hand side of the specifica- 
tion sequent: the services composed by this rule are seen as in a case construct, 
in which the applicability condition determines the executed sub-service. 

— The SEQ rule represents a composition given as a sequential execution of the 
sub-services and a composition of proofs under the logical reading. 

— The AX rule states that the system can infer specifications provable under a 
suitable calculus for BCDCq. 

— The ENV rule allows to use the specifications given in the environment E. 

Let us complete our example with a sample service composition. 

Example 4 (Service Composition). Given the environment Eps defined in Ex- 
ample 3 and the rules of SC, we can define a new service ProduceAndShip as the 
composition 77 of the stated specifications as follows: 

ProduceAndShip(req) :: 

ProduceRequest n ShippingRequestn 

3hasProduct . Product n 3hasDestination. Location ^ 

RefusedRequest U ( AcceptedRequest n BhasOff er . ( Of f er n BhasCost .Price ^ 

SEQ 

77i : DoRequest(req) :: 

ProduceRequest Fl ShippingRequestn 

3hasProduct .Product Fl 3hasDestination. Location => 

RefusedRequest U ( ( AcceptedProduceRequest fl 

3has0ffer. (ProduceOffer H 3hasCost .Price ) ) 

n ( AcceptedShippingRequest Fl 

3hasDffer.(ShippingDffer Fl 3hasCost .Price )) ) 

AND 

DoProduceRequest(req) :: ENV 

ProduceRequest H 3hasProduct .Product ^ 
RefusedRequest U ( AcceptedProduceRequest fl 
3has0ffer. (ProduceOffer Fl BhasCost .Price ) ) 

DoShippingRequest(req) :: ENV 

ShippingRequest H 3hasDestination. Location => 
RefusedRequest U ( AcceptedShippingRequest H 
3has0f f er . ( ShippingOff er H 3hasCost .Price ) ) 

772 : PresentOffer(req) :: 
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Ref usedRequest U ( ( AcceptedProduceRequest n 
3has0ffer. (ProduceOffer fl 3hasCost .Price ) ) 
n ( AcceptedShippingRequest PI 

3hasDffer.(ShippingDffer n BhasCost .Price )) ) => 
Ref usedRequest U ( AcceptedRequest Fl 
3hasDffer.( Offer n 3hasCost .Price ) ) 

CASE 

RefuseRequest(req) :: AX 

RefusedRequest => RefusedRequest 

ProcessOffers(req) :: ENV 

AcceptedProduceRequest Fl 

3has0ffer. (ProduceOffer H 3hasCost .Price ) Fl 
AcceptedShippingRequest Fl 

3has0ff er . ( ShippingOff er H 3hasCost .Price ) => 
AcceptedRequest H 3has0f f er . ( Off er IF 3hasCost .Price ) 

The behavior of this service is defined as follows: using the DoRequest ser- 
vice (service composition ili), it first invokes the DoProduceRequest and the 
DoShippingRequest services to query the Producer and the Shipper over the 
combined request req. The answer of the two is then combined by PresentOffer 
(service composition 772): by a case construct, this sub-service either responds 
that the request req has been classified as refused, or it accepts the request and 
generate the combined price using the ProcessOffers service. 

Let us discuss how the composite service computes information terms by 
explaining a sample execution. Let req_2 be both a ProduceRequest and a 
ShippingRequest with associated product book_l and shipping destination myjiome. 
Then, a call of ProduceAndShip over req_2 has as input information term ai = 
(tt, (tt, ((book_l, tt), (myJiome, tt)))). Following the composition, The execu- 
tion of ProduceAndShip starts with the sequence construct and the first invoked 
service is DoRequest which process the information term ai. DoRequest consists 
of a parallel call to the services of the Producer and the Shipper. The request 
to the Producer is executed as a call to DoProduceRequest. According to the 
conditions of the AND rule, we have a proof: 

TTi :: Tps,x : Pre(DoRequest) | ^^^ x : Pre(DoProduceRequest) 

The corresponding operator ^^ allows us to extract from ai the informa- 
tion term (tt, (book_l, tt)) G lT^(req_2 : Pre(DoProduceRequest)). Let us 
suppose that the Producer accepts the request and produces an offer p_off 
with an associated price. The offer is codified in the information term a2 = 
#DPij((tt, (book_l, tt)). Let us assume that 0:2 has the following form: 

a2 = (2, (tt, (p_of f , (tt, (p_off .price, tt))))) 

The request to the Shipper consists in a call to DoShippingRequest with input 
information term (tt, (myJiome, tt)). Also in this case this information term is 
generated from the operator associated with an applicability rule. As above, if 
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the Shipper accepts the request with an offer s_of f and its price, then the output 
information term is: 

as = (2, (tt, (s_off , (tt, (s_of f .price, tt))))) 

Now the apphcabihty conditions of the AND composition rule, in particular the 
proof: 

1^2 '■'■ Tps,^ : Post(DoProduceRequest) n Post(DoShippingRequest) 
I ggp^^ X : Post(DoRequest) 

allows us to combine a2 and ^3 to get an 0:4 G iTA/'(req_2 : Post(DoRequest)) as 
follows: 

04 = (2, ((tt, (p-of f , (tt, (p_off .price, tt)))), (tt, (s_of f , (tt, (s_off .price, tt)))))) 

Proceeding in the sequence, the previous responses are combined by a call of 
PresentOfFer with input information term 0:4. By the AC of the CASE construct, 
as the request has been accepted by both agents, we enter in the second of the 
cases and we call ProcessOffers with input information term: 

as = ( (tt, (p-of f , (tt, (p_off .price, tt)))), (tt, (s_of f , (tt, (s_off .price, tt)))) ) 

The service combines the offers producing a composite offer ps_off with its 
associated price ps_of f _price modeled by the information term: 

(tt, (ps_of f , (tt, (ps_of f _price, tt)))) 

Finally the output of PresentOfFer and ProduceAndShip is: 

(2, (tt, (ps_of f , (tt, (ps_off .price, tt))))) 

This object states that the request has been accepted and it contains both 
the object representing the composite offer (ps_off) and its composite price 
(ps_of f _price). O 

To conclude this section we state the result asserting the soundness of the rules 
with respect to uniform solvability. Its proof easily follows by induction on the 
structure of the composition U. 

Theorem 2. Let E = {C^,T,ri, (si,^i), . . . , {sn,^n)) be an environment and 
let s{x) :: P ^ Q be the main sequent of a com,position 11 over E. For every 
model M. for C, if M. is a model for E then the function (Ps extracted from U 
uniformly solves s in Ad. D 



5 Related Works and Conclusions 

In this section we review some of the current approaches for the composition of 
semantic Web services and we discuss the relations with our proposal. 
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One of the most relevant proposals for the semantic description of Web ser- 
vices is OWL-S [10]. An OWL-S service is described by three representations 
conforming to three distinct ontologies: a service profile, describing its use in 
terms of inputs, outputs, pre- and post- conditions, a process model, stating the 
flow of interactions that composes the service, and a grounding model, describing 
the details about its interface. Among these, the profile and the process model 
define an abstract representation of the service. In particular, the service pro- 
file gives a declarative description of the service. The process model describes 
the possible interactions with a service, that is its composition with other given 
services. The model mainly distinguish services into atom,ic and composite pro- 
cesses: atomic processes do not have a representation of their internal structure 
and thus they are entirely defined by their profiles; on the other hand, composite 
processes are representations of compositions of processes linked by some control 
structure. 

Many tasks can be supported by a pure atomic view of the services: one of 
these tasks is planning, which can be seen as a way to synthesize service compo- 
sitions. In [10] it is stated that the execution behavior of control constructs of the 
composite processes can not be suitably represented in OWL-DL: this brought to 
several translations of OWL-S compositions into different formalisms. The idea 
is that by a formalization of control structures one can reason over the definition 
of composite processes. One of these formalizations has been presented in [15]: 
the authors define a translation from DAML-S descriptions to Petri Nets and 
give procedures to compute composition, verification and simulation of services. 
However, as noted in [17], this approach only allows sequential composition of 
atomic services. A similar approach is presented in [17] in which OWL-S process 
models are encoded into state transition systems: synthesis of compositions is 
performed by planning techniques. This approach features the representation of 
non deterministic outcomes of services, complex specifications of goals and the 
translation of the resulting plans to executable processes. We must note that the 
above approaches are mostly based on the process representation of services. 

An approach that highlights the relationships between composition and soft- 
ware synthesis is proposed in [11]. This approach composes services on the base 
of their service profiles. The idea is that Web services can be treated as software 
components, thus service composition can be carried out as a problem of soft- 
ware composition. The approach uses the Structural Synthesis Program (SSP) 
method [12] to extract compositions. We notice that SSP is based on the im- 
plicative part of the intuitionistic prepositional calculus and it can only define 
sequential or conditional compositions in general. 

A different representation of semantic Web services is given by the WSMO 
ontology [7] and its Web service modeling language WSML. As OWL-S, these 
languages define services by their profiles, but WSMO does not explicitly rep- 
resent the structure of composition of Web services in terms of control fiow. 
Interactions of services are controlled by specific agents called mediators which 
refer to the standard execution environment WSMX. 
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As can be noted, many of the latter proposals do not base their composi- 
tions on a logic representation of pre- and post- conditions or on the function 
mapping inputs to outputs. Moreover, whenever a composition of sub services 
is defined, this does not explicitly depend on the condition stated in declarative 
description of the composite service. A kind of composition that depends on 
the formulas of service profiles can be found in the related approaches for ac- 
tion formalisms and planning over description logics as in [2,6,8,14]. However, 
classical planning techniques mostly generate sequences of services achieving a 
goal: as noted in [17], this can be limiting in practical cases when one needs to 
distinguish between different condition cases and represent sequence constraints 
between goals. 

To compare our approach with the ones cited above, we remark that SC 
assures that the composite service specification (the service profile) directly fol- 
lows from composition proof. The correctness of compositions can be checked 
directly by verifying the applicability conditions of the rules used in the com- 
position: moreover, our rules directly represent common control structures, thus 
allowing to represent complex compositions. 

Even if in this paper we detailed manual composition of services, by imple- 
menting SC we would obtain a method for automatic composition. For an actual 
implementation of our calculus we need both an implementation of BCDCo and 
a method to convert in our formalism the service descriptions from specification 
languages as OWL-S that preserves their intended semantics. The main limita- 
tion of our approach stands in the restricted expressivity of the description logic 
at its base, that represents a small fragment of the actual expressivity of current 
ontology languages. In order to define a calculus for automatic composition, 
in our future work we plan to study the properties of SC and of its underly- 
ing constructive description logic BCDCq. In particular, we remark that BCDCq 
is related to the logic ICACC [4] for which we already presented a decidable 
tableaux calculus: moreover, it can be shown that the derived tableaux proce- 
dure is PsPACE-complete, as in the case of satisfiability procedures for classical 
ACC [16]. The relations between BCDCq, BCD£ and ICACC will be subject of our 
future investigations. On the other hand, in order to evaluate the properties of 
the composition calculus, we also intend to examine its relations with software 
synthesis and action formalisms. 
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